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DETAILED ACTION 



Response to Amendment 

1 . Applicant amendment filed on filed on March 21 st , 2008 has been entered. 
Claims 1 , 8, 1 3, 1 8, 21 , 25, 29 and 30 have been amended. Claims 1 6, 23 and 26 have 
been canceled. Claims 1-15, 17-23, 24-25 and 27-34 are still pending in the application. 



Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

3. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

4. This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
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the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

5. Claims 1-12, 13-14, 17, 20, 24-25, and 30-34 are rejected under 35 

U.S.C. 1 03(a) as being unpatentable over Shenoy et al. (US 2003/0223425 A1 ) in view 

of Yavatkar et al. (US 2003/01 28668 A1 ) and further in view of Moberg et al. (USP 

6,697,872). 

Shenoy et al. discloses a communication system for distributed implementation 
of control protocols in routers and switches with the following features: regarding 
claim 1, a system, comprising a control card, comprising (Fig.1, distributed processing 
architecture, see "network node includes a control module 106" recited in paragraph 
0016 lines 3-4), a control processor to execute a control portion of an exterior gateway 
protocol (Fig.1, distributed processing architecture, see "control module 106 and 108 
include a processor 122 to carry out the function" recited in paragraph 0018 lines 1-3), a 
routing table of exterior gateway routes and devices (Fig.1, distributed processing 
architecture, see "updating forwarding information, programming hardware tables" 
recited in paragraph 0017 lines 4-9), a line card, comprising (Fig.1, distributed 
processing architecture, see "three line cards 102A, 102B and 102C" recited in 
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paragraph 0016 lines 5-6), a line processor to execute an offload portion of an exterior 
gateway protocol (Fig.1, distributed processing architecture, see "line processor 118 
performs functions" recited in paragraph 0020 lines 10-12) and a communications port 
to allow termination of at least one communication link (Fig.1 , distributed processing 
architecture, see "each line card includes at least one port to allow link termination" 
recited in paragraph 0020 lines 1-6); regarding claim 3, the control processor further 
comprising an Intel Architecture processor (Fig.1, distributed processing architecture, 
see "processor within each control module includes InteM 386 processor family" recited 
in paragraph 0018 lines 1-5); regarding claim 5, the line processor further comprising an 
Intel IXP processor (Fig.1 , distributed processing architecture, see "processor within 
each control module includes InteM 386 processor family" recited in paragraph 0018 
lines 1-5); regarding claim 8, a method of processing an exterior gateway protocol 
packet (Fig.1 , distributed processing architecture, see "protocols are implemented by 
control module" recited in paragraph 0017 lines 9-16), receiving an incoming packet at a 
line-card (Fig.1, distributed processing architecture, see "line cards receive the traffic" 
recited in paragraph 0020 lines 1-4), Parsing the packet to extract protocol data (Fig.1 , 
distributed processing architecture, see "packet parsing" recited in paragraph 0020 lines 
10-12); transmitting any control-relevant data to a control card (Fig. 3 line card operating 
system, see "forwarding information to control module" recited in paragraph 0035 lines 
1-7) and generating message traffic for peer gateways including announcing routes to 
the peer gateways (Fig.1, distributed processing architecture, see "forwarding 
information is generated" recited in paragraph 0022 lines 1-9); regarding claim 9, 
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receiving the incoming packet at the line-card further comprising receiving a packet 
through the Transmission Control Protocol (Fig. 2, two communication channel used to 
communicate information, see "uses reliable transport layer protocol TCP" recited in 
paragraph 0028 lines 3-7); regarding claim 13, transmitting any control-relevant data to 
a control card further comprising transmitting data related to valid updates from the peer 
gateways (Fig. 2, router implementing a distributed control protocol, see "line card 
operating system communicates with control module" recited in paragraph 0027 lines 1- 
8); regarding claim 20, performing Border Gateway Protocol functions (Fig.1, distributed 
processing architecture, see "control module implements border gateway protocol BGP" 
recited in paragraph 0017 lines 9-16) and further comprising parsing and validating 
incoming packets (Fig.1 , distributed processing architecture, see "the processor 
performs packet parsing" recited in paragraph 0020 lines 10-12); regarding claim 22, 
performing Border Gateway Protocol functions (Fig.1, distributed processing 
architecture, see "control module implements border gateway protocol BGP" recited in 
paragraph 0017 lines 9-16) and further comprising caching a routing table received from 
the control card (Fig.1, distributed processing architecture, see "the control module send 
the forwarding information" recited in paragraph 0017 lines 1-16); regarding claim 24, 
performing Border Gateway Protocol functions (Fig.1, distributed processing 
architecture, see "control module implements border gateway protocol BGP" recited in 
paragraph 0017 lines 9-16); regarding claim 25, a method of establishing a control 
portion of a distributed exterior gateway protocol (Fig.1, distributed processing 
architecture, see "control module 106 and 108 include a processor 122 to carry out the 
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function" recited in paragraph 0018 lines 1-3), setting up control connections with line- 
cards (Fig. 2, router implementing a distributed control protocol, see "TCP includes set 
up control" recited in paragraph 0028 lines 5-7); configuring the line cards (Fig.1, 
distributed processing architecture, see "receiving traffic into the network node" recited 
in paragraph 0020 lines 1-5), including providing a routing table and policy data to each 
line card (Fig. 1, distributed processing architecture, see "the line card processors 118 
are configured for routing information etc." recited in paragraph 0022 lines 4-16) and 
performing central Border Gateway Protocol functions (Fig.1, distributed processing 
architecture, see "control module implements border gateway protocol BGP" recited in 
paragraph 0017 lines 9-16); regarding claim 27, registering a control portion of a 
protocol to be executed further comprising registering the control portion with a 
distributed control plane architecture infrastructure module (Fig. 3, depicts a system for 
distributing forwarding information through a user space and kernel space, see 
"distribution engine manages the distribution of forwarding information at kernel space 
level" recited in paragraph 0032 lines 4-15); Regarding claim 28, performing central 
Border Gateway Protocol functions further comprising processing valid updates from the 
line cards and adjusting the routing table as needed (Fig. 3, depicts a system for 
distributing forwarding information through a user space and kernel space, see "the 
forwarding tables in the user space and kernel space are updated" recited in paragraph 
0034 lines 20-26); regarding claim 29, performing central Border Gateway Protocol 
functions further comprising providing an updated routing table to each line card as 
necessary (Fig.1, distributed processing architecture, see "the distribution of forwarding 
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information between control module and line cards has a distributed processing 
architecture" recited in paragraph 0031 lines 1-19); regarding claims 30, an article of 
machine-readable code containing instructions that, when executed, cause the machine 
to (Fig.1, distributed processing architecture, see "to execute a sequence of machine- 
readable instructions" recited in paragraph 0046 lines 1-10), receiving an incoming 
packet at a line-card (Fig.1 , distributed processing architecture, see "line cards receive 
the traffic" recited in paragraph 0020 lines 1-4), Parsing the packet to extract protocol 
data (Fig.1, distributed processing architecture, see "packet parsing" recited in 
paragraph 0020 lines 10-12) and transmitting any control-relevant data to a control card 
(Fig. 3 line card operating system, see "forwarding information to control module" recited 
in paragraph 0035 lines 1-7) and generate message traffic for peer gateways including 
announcing routes to the peer gateways (Fig.1, distributed processing architecture, see 
"forwarding information is generated" recited in paragraph 0022 lines 1-9); regarding 
claim 31 , the instructions causing the machine to receive an incoming packet at a line- 
card (Fig.1, distributed processing architecture, see "line cards receive the traffic" 
recited in paragraph 0020 lines 1-4), further cause the machine to receive a packet 
through the Transmission Control Protocol (Fig. 2, two communication channel used to 
communicate information, see "uses reliable transport layer protocol TCP" recited in 
paragraph 0028 lines 3-7). 

Shenoy et al do not disclose the following features: regarding claim 1 , backplane to 
allow the control card and the line card to communicate and wherein the line card is 
configured to filter all malformed, illegal and duplicate update messages from peer 
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gateway peers; regarding claim 2, the control processor further comprising a general- 
purpose processor; regarding claim 4, the line processor further comprising a network- 
enabled processor; regarding claim 6, the backplane further comprising a physical 
backplane connection and regarding claim 7, the backplane further comprising a 
network; regarding claim 8, determining if the packet is valid; regarding claim 10, 
determining if the packet is valid further comprising determining if the packet is a 
malformed packet; regarding claim 11, if the packet is valid further comprising applying 
a packet filter to the packets; regarding claim 12, determining if the packet is valid 
further comprising applying an address filter to the packets; regarding claim 14, further 
comprising decrypting encrypted packets; regarding claim 17, generating message 
traffic for peer gateways further comprising encrypting messages for peer gateways that 
require encryption; regarding claim 18, a method of establishing an offload portion of a 
distributed exterior gateway protocol comprising, initializing a line card and registering 
an offload portion of a protocol to be executed by the line-card with a central registration 
point and performing Border Gateway Protocol functions at the line-card; regarding 
claim 25, initializing a control card, registering a control portion of a protocol to be 
executed by the control card with a central registration point and executing offload 
portions of the protocol; regarding claim 32, the instructions causing the machine to 
determine if the packet is valid further causes the machine to determine if the packet is 
a mal-formed packet; regarding claim 33, the instructions causing the machine to 
determine if the packet is valid further causes the machine to apply a packet filter to the 
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packet and regarding claim 34, the instructions causing the machine to determine if the 
packet is valid further causes the machine to apply an address filter to the packet. 

Yavatkar et al. disclose a communication system for distributed implementation 
of control protocols in routers and switches with the following features: regarding 
claim 1, backplane to allow the control card and the line card to communicate (Fig. 2, 
router implementing a distributed control protocol, see "backplane 26 allows central 
control protocol information to be sent between control plane 22 and network" recited in 
paragraph 0019 lines 6-9); regarding claim 2, the control processor further comprising a 
general-purpose processor (Fig. 2, router implementing a distributed control protocol, 
see "control plane processor 23 which may be a general purpose processor" recited in 
paragraph 0016 lines 1-4); regarding ciaim 4, the line processor further comprising a 
network-enabled processor (Fig. 5, hardware used for distributed implementation, see 
"general purpose processor 65 performs the offload processing" recited in paragraph 
0032 lines 5-13); regarding claim 6, the backplane further comprising a physical 
backplane connection (Fig. 2, router implementing a distributed control protocol, see 
"backplane 26 connect forwarding planes to each other and to control plane 22" recited 
in paragraph 0019 lines 1-2) and regarding ciaim 7, the backplane further comprising a 
network (Fig. 2, router implementing a distributed control protocol, see "backplane 26 
allows a packet received from networks" recited in paragraph 0019 lines 2-6); regarding 
ciaim 25, executing offload portions of the protocol (Fig.4, flow diagram of a process for 
implementing the distributed, see "perform the offload portion of the of the distributed 
control protocol" recited in paragraph 0032 lines 10-17) and registering a control portion 
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of a protocol to be executed by the control card with a central registration point (Fig. 3, 
flow of a control protocol for distributed implementation of OSPF control protocol, see 
"offload portion of distributed control protocol is forwarded of the router 12 to control 
plane" recited in paragraph 0021 lines 1-27). 

It would have been obvious to one of the ordinary skill in the art at the time of the 
invention to modify the system of Shenoy et al. by using the features, as taught by with 
Yavatkar et al., in order to provide backplane to allow the control card and the line card 
to communicate and wherein the line card is configured to filter all malformed, illegal 
and duplicate update messages from peer gateway peers, the control processor further 
comprising a general-purpose processor, the line processor further comprising a 
network-enabled processor, the backplane further comprising a physical backplane 
connection, the backplane further comprising a network, initializing a control card, 
registering a control portion of a protocol to be executed by the control card with a 
central registration point and executing offload portions of the protocol. The motivation 
of using these functionalities is to enhance the functionality of the system in a cost 
effective manner. 

Shenoy et al. and Yavatkar et al. do not disclose the following features: regarding 
claim 1, wherein the line card is configured to filter all malformed, illegal and duplicate 
update messages from peer gateway peers; regarding claim 8, determining if the packet 
is valid; regarding claim 10, determining if the packet is valid further comprising 
determining if the packet is a malformed packet; regarding claim 11, if the packet is 
valid further comprising applying a packet filter to the packets; regarding claim 12, 



Application/Control Number: 1 0/71 3,586 Page 1 1 

Art Unit: 2616 

determining if the packet is valid further comprising applying an address filter to the 
packets; regarding claim 14, further comprising decrypting encrypted packets; regarding 
claim 17, generating message traffic for peer gateways further comprising encrypting 
messages for peer gateways that require encryption; regarding claim 32, the 
instructions causing the machine to determine if the packet is valid further causes the 
machine to determine if the packet is a mal-formed packet; regarding claim 33, the 
instructions causing the machine to determine if the packet is valid further causes the 
machine to apply a packet filter to the packet and regarding claim 34, the instructions 
causing the machine to determine if the packet is valid further causes the machine to 
apply an address filter to the packet. 

Moberg et al. discloses a communication system for distributed packet 
processing using encapsulation and decapsulation chains with the following features: 
regarding claim 1, wherein the line card is configured to filter all malformed, illegal and 
duplicate update messages from gateway peers (Fig.1, distributed processing 
architecture, see "examine the entire packet to verify its validity and determine how to 
handle" recited in column 4 lines 43-67); regarding claim 8, determining if the packet is 
valid (Fig.1 , distributed processing architecture, see "examine the entire packet to verify 
its validity" recited in column 4 lines 55-58); regarding claim 10, determining if the 
packet is valid further comprising applying a packet filter to the packets (Fig.1 , 
distributed processing architecture, see "examine the entire packet to verify its validity" 
recited in column 4 lines 55-62); regarding claim 1 1 , if the packet is valid further 
comprising applying a packet filter to the packets (Fig.1 , distributed processing 
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architecture, see "after validation the data packet processed" recited in column 4 lines 
47-49); regarding claim 12, determining if the packet is valid further comprising applying 
an address filter to the packets (Fig.1, distributed processing architecture, see "examine 
the network address of the received packet" recited in column 4 lines 49-51); regarding 
claim 14, further comprising decrypting encrypted packets (Fig. 4, chain walker used to 
process packet, see "decryption element 60" recited in column 7 lines 10-16); regarding 
claim 17, generating message traffic for peer gateways further comprising encrypting 
messages for peer gateways that require encryption (Fig. 4, chain walker used to 
process packet, see "the chain includes an encryption element 74" recited in column 7 
lines 10-16 and lines 25-28); regarding claim 32, the instructions causing the machine to 
determine if the packet is valid further causes the machine to determine if the packet is 
a mal-formed packet (Fig.1 , distributed processing architecture, see "examine the entire 
packet to verify its validity" recited in column 4 lines 55-62); regarding claim 33, the 
instructions causing the machine to determine if the packet is valid further causes the 
machine to apply a packet filter to the packet (Fig.1 , distributed processing architecture, 
see "after validation the data packet processed" recited in column 4 lines 47-49); 
regarding claim 34, the instructions causing the machine to determine if the packet is 
valid further causes the machine to apply an address filter to the packet (Fig.1 , 
distributed processing architecture, see "examine the network address of the received 
packet" recited in column 4 lines 49-51). 

It would have been obvious to one of the ordinary skill in the art at the time of 
invention to modify the system of Shenoy et al. with Yavatkar et al. by using the 
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features, as taught by Moberg et al., in order to provide wherein the line card is 
configured to filter all malformed, illegal and duplicate update messages from peer 
gateway peers, determining if the packet is valid, determining if the packet is a 
malformed packet, if the packet is valid further comprising applying a packet filter to the 
packets, applying an address filter to the packets, comprising decrypting encrypted 
packets, generating message traffic for peer gateways further comprising encrypting 
messages for peer gateways that require encryption, the instructions causing the 
machine to determine if the packet is valid further causes the machine to determine if 
the packet is a mal-formed packet, the instructions causing the machine to determine if 
the packet is valid further causes the machine to apply a packet filter to the packet and 
the instructions causing the machine to determine if the packet is valid further causes 
the machine to apply an address filter to the packet. 

6. Claims 18-19, 21 and 24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Shenoy et al. (US 2003/0223425 A1 ) in view of Yavatkar et al. (US 
2003/01 28668 A1 ) and Moberg et al. (USP 6,697,872 B1 ) as applied to claim 1 8 above, 
and further in view of Macera et al. (USP 5,490,252). 

Shenoy et al., Yavatkar et al. and Moberg et al. disclose the claimed limitations 
as described in paragraph 5 above. Shenoy et al. also disclose the following features: 
regarding claim 18, setup a control connection with a control card (Fig. 2, router 
implementing a distributed control protocol, see "TCP includes set up control" recited in 
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paragraph 0028 lines 5-7); transmit data resource data to the control card (Fig. 3 line 
card operating system, see "forwarding information to control module" recited in 
paragraph 0035 lines 1-7); receiving configuration information from the control card 
(Fig.1, distributed processing architecture, see "receiving traffic into the network node" 
recited in paragraph 0020 lines 1-5); establishing connections with exterior gateway 
peers (Fig.1, distributed processing architecture, see "each line card includes at least 
one port to allow link termination" recited in paragraph 0020 lines 1-6) and transmitting 
only valid Border Gateway Protocol data to the control card (Fig. 2, router implementing 
a distributed control protocol, see "line card operating system communicates with 
control module" recited in paragraph 0027 lines 1-8). 

Yavatkar et al. disclose the following features: regarding claim 18, a method of 
establishing an offload portion of a distributed exterior gateway protocol comprising 
(Fig.4, flow diagram of a process for implementing the distributed, see "perform the 
offload portion of the of the distributed control protocol" recited in paragraph 0032 lines 
10-17), registering an offload portion of a protocol to be executed by the line-card with a 
central registration point (Fig.3, flow of a control protocol for distributed implementation 
of OSPF control protocol, see "offload portion of distributed control protocol is forwarded 
of the router 12 to control plane" recited in paragraph 0021 lines 1-27) and regarding 
claim 19, registering an offload portion further comprising registering with a distributed 
control plane architecture infrastructure module (Fig.3, flow of a control protocol for 
distributed implementation of OSPF control protocol, see "offload portion of distributed 



Application/Control Number: 10/713,586 Page 15 

Art Unit: 2616 

control protocol is forwarded of the router 12 to control plane" recited in paragraph 0021 
lines 1-27). 

Moberg et al. disclose the following features: regarding claim 18, including 
running output policies for each of the gateway peers (Fig.1, distributed processing 
architecture, see "examine the entire packet to verify its validity and determine how to 
handle" recited in column 4 lines 43-67); regarding claim 21, performing Border 
Gateway Protocol functions further comprising filtering all malformed, illegal and 
duplicate update messages from gateways peers (Fig.1, distributed processing 
architecture, see "examine the entire packet to verify its validity and determine how to 
handle" recited in column 4 lines 43-67) and regarding claim 24, further comprising 
encrypting and decrypting packets as necessary (Fig. 4, chain walker used to process 
packet, see "decryption element 60" recited in column 7 lines 10-16 and lines 25-28). 

Shenoy et al., Yavatkar et al. and Moberg et al. do not disclose the following 
features: regarding claim 18, initializing a line card and performing Border Gateway 
Protocol functions at the line-card. 

Macera et al. disclose the following features: regarding claim 18, initializing a line 
card (Fig. 6, hot swap features of the system, see "each module is automatically self- 
configured when inserted into the backplane" recited in column 7 lines 26-44), and 
performing Border Gateway Protocol functions at the line-card (Fig. 3, network 
connected to bus of BES 43 via network interface module, see "BES supports the BGP 
on line interface module" recited in column 10 lines 16-31). 
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It would have to one of the ordinary skill in the art at the time of invention to 
modify the system of Shenoy et al. with Yavatkar et al. and Moberg et al. by using the 
features, as taught by Macera et al., in order to provide initializing a line card and 
performing Border Gateway Protocol functions at the line-card. The motivation of using 
this function is to enhance the system in a cost effective manner. 

7. Claim 15 is rejected under 35 U.S.C. 103(a) as being unpatentable over Shenoy 
et al. (US 2003/0223425 A1) in view of Yavatkar et al. (US 2003/0128668 A1) and 
Moberg et al. (USP 6,697,872 B1 ) as applied to claim 8 above, and further in view of 
Harvey etal. (US 2003/0140167 A1). 

Shenoy et al., Yavatkar et al. and Moberg et al. disclose the claimed limitations 
as described in paragraph 5 above. Shenoy et al., Yavatkar et al. and Moberg et al. do 
not disclose the following features: regarding claim 15, generating message traffic for 
peer gateways and further comprising generating responses required by the incoming 
packets. 

Harvey et al. discloses a method and apparatus for synchronizing redundant 
communication task with the following features: regarding claim 15, generating 
message traffic for peer gateways (Fig. 1 , flow chart depicting a method for 
synchronizing TCP tasks, see "an update message should be generated" recited in 
paragraph 0032 lines 1-1 1) and further comprising generating responses required by 
the incoming packets (Fig. 1, flow chart depicting a method for synchronizing TCP 
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tasks, see "issuing TCP packet acknowledgement message step 126" recited in 
paragraph 0030 lines 1-10). 

It would have been obvious to one of the ordinary skill in the art at the time of the 
invention to modify the system of Shenoy et al. with Yavatkar et al. and Moberg et al. 
by using the features, as taught by Harvey et al., in order to provide of generating 
message traffic for peer gateways and further comprising generating responses 
required by the incoming packets. The motivation of using this functionality is to 
enhance the functionality of the system in a cost effective manner. 

Response to Arguments 

8. Applicant's arguments with respect to claims 1-15, 17-23, 24-25 and 27-34 have 
been considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SYED BOKHARI whose telephone number is (571)270- 
31 15. The examiner can normally be reached on Monday through Friday 8:00-17:00 
Hrs.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kwang B. Yao can be reached on (571) 272-3182. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Syed Bokhari/ 
Examiner, Art Unit 2616 
6/9/2008 



/Kwang B. Yao/ 

Supervisory Patent Examiner, Art Unit 2616 



